{"id":924993,"url":"https://alion.io/job/droneshield-cyber-security-grc-engineer","title":"Cyber Security GRC Engineer","company":{"id":60436,"name":"DroneShield","domain":"droneshield.com","url":"https://alion.io/company/droneshield","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sydney, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":59000,"max_usd":145000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CMMC","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"NIST CSF","optional":false},{"name":"Power Automate","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Linux","optional":true},{"name":"NIST 800-53","optional":true}],"status":"live","first_seen_at":"2026-09-15T05:55:23Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-11-05T01:47:27Z","board_verified":true,"closed_at":null,"days_open":50,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":50},"description":"Work with cutting-edge AI technology that helps make the world a safer and more secure place. DroneShield (ASX:DRO) develops market-leading counter-drone solutions used by military organisations, government agencies, airports, critical infrastructure operators, and law enforcement operating in some of the most challenging and high-stakes environments in the world. Employees work at the forefront of innovation, solving complex technical problems and delivering mission-critical capabilities where performance, reliability, and speed matter. \nAs an ASX200-listed company and the world's only publicly listed pure-play counter-drone business, DroneShield is experiencing rapid growth. Revenue increased from A$57 million in 2024 to more than A$217 million in 2025, supported by record profitability, a global sales pipeline exceeding A$2.5 billion, and annual R&D investment of over A$50 million. \nSince 2017, DroneShield has grown from 11 employees to more than 550 globally, with operations across Australia, the United States, Europe, and the Middle East, supporting customers in over 70 countries. \nThe role is based at DroneShield's Sydney headquarters, which houses corporate, commercial, engineering, and operational teams supporting the company's global growth and customer base. \nAbout the role \nDroneShield is looking for a Cyber Security GRC Engineer to support the operation and continual improvement of DroneShield’s governance, risk and compliance programme. Reporting to the Cyber Security GRC Specialist, this role contributes to maintaining an audit-ready security posture, consistent and scalable governance across DroneShield’s global operations and risk-informed business decision-making.\nYou will support ISO 27001 and core governance, risk and compliance processes, including surveillance and recertification audits, continual improvement of the ISMS, risk management, control assurance and the development of scalable, low-friction compliance processes. You will also contribute to customer and regulatory assurance activities and support alignment with frameworks such as ISM, PSPF, DISP, CMMC and NIST where required.\nAs part of the broader remit, you will help operate DroneShield’s third party and supply chain security programme, including vendor due diligence, security assessments, remediation tracking, ongoing monitoring and reporting.\nThis is an engineering role within a GRC function. A significant part of the role involves operating ISMS and supply-chain processes, including audits, evidence management, risk registers, vendor assessments and remediation tracking. The other major component is engineering better ways to perform that work. You will use scripting, APIs, integrations and workflow automation to improve evidence collection, assessments, reminders and reporting, replacing manual spreadsheet-based processes where practical. If your GRC experience has been limited to manual compliance activities and you have not used technology to improve a process, this role is unlikely to be the right fit.\nResponsibilities, Duties and Expectations \nSupport the operation and continual improvement of the ISO 27001 ISMS, including surveillance and recertification audits, evidence collection and corrective-action tracking.\nAssist with internal audits, control validation and broader GRC assurance activities across corporate, infrastructure, cloud and product environments.\nMaintain accurate GRC records, including risks, controls, evidence, non-conformities, exceptions and remediation actions.\nSupport cyber risk assessments and the maintenance of the cyber risk register.\nSupport the mapping and alignment of controls to relevant frameworks, including the ISM, PSPF, DISP, CMMC, NIST CSF and NIST SP 800-171.\nContribute to customer, tender and regulatory assurance responses using accurate, reusable and scalable evidence.\nSupport policy and standard lifecycle activities, including scheduled reviews, stakeholder consultation and publication.\nOperate third party and supply chain security processes, including vendor intake, risk classification, due diligence, security assessment, remediation tracking, ongoing monitoring and offboarding.\nReview vendor questionnaires, certifications, audit reports and other security assurance evidence.\nMaintain vendor risk records and track material findings and remediation actions, escalating risks and exceptions to the GRC Specialist as required.\nWork with Procurement, Legal, IT, Security, Engineering and business owners to incorporate proportionate security checks into vendor onboarding, renewal and offboarding.\nDesign and build automation for evidence collection, assessment workflows, reminders, reporting and other compliance activities.\nBuild and maintain integrated dashboards and metrics covering control effectiveness, audit readiness, risk and remediation progress, avoiding duplicate or standalone reporting processes.\nQualifications, Experience and Skills \nBS degree in Computer Science, Information Technology, or a similar technical field, or equivalent practical experience.\nDemonstrated practical experience in cyber security GRC, technology risk, third party risk, security assurance, audit or a related field.\nCandidates would typically bring 3-5 years of relevant experience in related roles, which may include:\nGRC Consultant\nSecurity Engineer\nSecurity Analyst\nCompliance and Risk Officer\n\nEssential knowledge and experience:\nPractical experience supporting an ISO 27001 ISMS, audit lifecycle or comparable security assurance programme.\nExperience conducting or supporting risk assessments, control assessments, compliance reviews or third-party security assessments.\nPractical scripting or integration experience (Python, PowerShell, REST APIs, Jira or Power Automate workflows or similar) that you have used to automate a compliance, reporting or assessment task. Be ready to talk through something you built.\nAbility to review security and compliance evidence, identify gaps and communicate findings clearly.\nStrong organisational skills, with the ability to manage multiple assessments, actions and stakeholders.\nClear written and verbal communication skills.\nDesirable\nExposure to ISM, PSPF, DISP, CMMC, NIST 800-53, NIST CSF or NIST SP 800-171.\nFamiliarity with GRC platforms, workflow tools, evidence repositories or AI-assisted assessment technologies.\nExperience introducing automation using AI or low-code technologies.\nComfortable working on the command line in a Linux environment.\nProject management techniques and processes.\nRelevant ISO 27001, audit, risk or cyber security training or certification.\nNote for recruitment agencies: We do not accept unsolicited candidates from external recruiters unless specifically instructed.\nData Privacy\nDroneShield Group Pty Ltd collects and processes personal information for recruitment and hiring purposes. Where applicable, personal information is processed on the basis of DroneShield's legitimate interests in assessing and selecting candidates for employment. For further information regarding how we collect, use, disclose, store and retain personal information, including your privacy rights, please refer to our Privacy Policy: https://www.droneshield.com/privacy-policy","description_format":"text","description_chars":7243,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Security Compliance","Defense Manufacturing"],"lifecycle":[{"event":"open","at":"2026-09-15T05:59:11Z"}],"visa":[],"liveness":{"score":43,"band":"fade","label":"Fading","p_open":1,"p_active":0.786,"p_room":0.55,"age_days":50,"expected_fill_days":42,"reasons":["conf:4","win:tail"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/droneshield-cyber-security-grc-engineer","json_url":"https://alion.io/job/droneshield-cyber-security-grc-engineer.json","meta":{"generated_at":"2026-11-05T03:53:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4997,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":60436},"rest":"https://alion.io/mcp/rest/get_company?id=60436"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdroneshield-cyber-security-grc-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdroneshield-cyber-security-grc-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdroneshield-cyber-security-grc-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/droneshield-cyber-security-grc-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdroneshield-cyber-security-grc-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":924993}},{"tool":"search_jobs","arguments":{"company":"droneshield.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":924993},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}